$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ac163-ead6-4734-882a-290485728bb4.roa File: ba0ac163-ead6-4734-882a-290485728bb4.roa (raw, json) Hash identifier: tsmhCmSgj8ZcEu2Eo4gMg4ITvuSbMVCx+wZD3snY9f4= Subject key identifier: 4B:01:12:A6:AD:80:CE:F6:FE:3E:47:CB:84:AC:60:FC:9F:A9:9C:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E55656D74FB2A58AFBB01B27DF0E1BC0FB423EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ac163-ead6-4734-882a-290485728bb4.roa Signing time: Tue 08 Jul 2025 15:51:14 +0000 ROA not before: Tue 08 Jul 2025 15:51:14 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:1040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:55:65:6d:74:fb:2a:58:af:bb:01:b2:7d:f0:e1:bc:0f:b4:23:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:51:14 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=e2f96470fdc734aaed3a7301dd2c5527d49354f99880f7259041eb13649fff48, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:fa:c4:65:2c:11:46:e3:8e:7a:f4:f1:c5: c2:c5:36:05:ac:ef:a1:94:f2:f0:de:d0:62:e4:22: 1a:df:26:d7:92:bf:5d:c5:a5:aa:06:bb:fc:0d:2f: e8:c9:f1:3d:dd:d9:02:da:be:69:48:d5:57:66:58: bd:f7:f8:63:8b:14:23:f3:08:c1:3e:53:b8:ed:0d: 5e:37:dd:26:ba:84:d0:42:85:a4:ae:76:06:db:36: 32:bb:5d:e4:a1:2a:be:fd:eb:de:94:76:7e:8d:1b: 80:c9:28:fa:43:2a:82:db:fd:04:87:6e:78:12:2c: 4c:1d:e5:f3:ee:a9:f2:9b:ac:f6:77:97:0b:0f:35: d6:c7:43:43:3d:00:8f:16:cf:24:83:1c:a1:78:04: e6:f4:a3:fe:4f:18:4a:94:70:3c:04:fd:3a:4a:19: 30:0a:fe:62:cd:4b:e5:69:91:81:72:b3:d3:f5:43: b8:de:67:07:76:24:39:20:47:0a:c6:91:df:7b:85: a2:5a:3a:74:da:f5:ca:28:15:65:65:91:53:cf:f7: 1d:11:5d:af:60:96:e1:83:4e:78:68:37:9c:f0:ce: 96:79:01:4a:a3:46:7a:e4:2c:42:be:71:80:4d:05: 3c:31:bd:80:47:1b:6b:54:6c:97:c1:c4:3c:3c:1c: 2e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:01:12:A6:AD:80:CE:F6:FE:3E:47:CB:84:AC:60:FC:9F:A9:9C:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ac163-ead6-4734-882a-290485728bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:1040::/46 Signature Algorithm: sha256WithRSAEncryption a8:00:54:5b:45:f7:b4:0f:bd:29:97:60:a0:9c:00:53:ad:8f: ee:d7:ba:a5:7b:f4:dd:8a:1d:74:94:ba:b1:00:4f:93:02:3a: cb:f0:f8:0b:05:10:62:19:f1:9f:6a:a9:b6:71:7c:da:b3:5a: 64:a4:c9:ee:8c:59:ac:cf:da:bb:18:bd:a4:e7:fe:ab:3f:99: 29:2a:f7:39:96:5c:48:72:97:dc:a9:58:1d:6d:00:d7:7b:d8: fd:c5:a0:b9:53:9a:c7:ce:1a:6c:2a:aa:06:6c:bd:93:b2:1d: df:a0:98:a8:40:f4:2a:79:01:68:29:59:69:e3:0a:3c:39:c1: 6e:bc:5b:b0:7b:04:20:b4:a9:38:9d:de:2f:9c:f5:44:2d:bf: e4:62:9f:f6:2f:0d:68:be:bc:6f:d6:04:18:7f:59:0d:9b:23: f9:d5:96:7b:c5:a6:18:81:2e:0e:19:9f:82:a2:f3:7c:5f:91: be:f2:a6:4c:f1:8a:d2:d0:46:11:7c:33:df:19:63:d1:9e:4c: b9:3b:a6:95:ad:81:d3:e3:83:fe:04:cc:77:cb:9c:89:23:df: 49:5c:69:30:7d:58:ba:05:8e:e9:93:b5:6e:e7:3e:75:a2:cc: b2:0a:30:b1:cd:13:9b:3d:eb:89:c7:6f:b0:42:c7:2f:6d:87: 78:bb:7a:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXlVlbXT7KlivuwGyffDhvA+0I+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTU1MTE0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmY5NjQ3MGZkYzczNGFhZWQzYTczMDFkZDJjNTUyN2Q0 OTM1NGY5OTg4MGY3MjU5MDQxZWIxMzY0OWZmZjQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjuPrEZSwRRuOOevTxxcLFNgWs76GU8vDe0GLkIhrfJteS v13FpaoGu/wNL+jJ8T3d2QLavmlI1VdmWL33+GOLFCPzCME+U7jtDV433Sa6hNBC haSudgbbNjK7XeShKr79696Udn6NG4DJKPpDKoLb/QSHbngSLEwd5fPuqfKbrPZ3 lwsPNdbHQ0M9AI8WzySDHKF4BOb0o/5PGEqUcDwE/TpKGTAK/mLNS+VpkYFys9P1 Q7jeZwd2JDkgRwrGkd97haJaOnTa9cooFWVlkVPP9x0RXa9gluGDTnhoN5zwzpZ5 AUqjRnrkLEK+cYBNBTwxvYBHG2tUbJfBxDw8HC4LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSwESpq2Azvb+PkfLhKxg/J+pnOMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMGFjMTYzLWVhZDYtNDczNC04ODJhLTI5MDQ4NTcyOGJiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3EEAwDQYJKoZIhvcNAQELBQADggEBAKgAVFtF97QPvSmXYKCcAFOt j+7XuqV79N2KHXSUurEAT5MCOsvw+AsFEGIZ8Z9qqbZxfNqzWmSkye6MWazP2rsY vaTn/qs/mSkq9zmWXEhyl9ypWB1tANd72P3FoLlTmsfOGmwqqgZsvZOyHd+gmKhA 9Cp5AWgpWWnjCjw5wW68W7B7BCC0qTid3i+c9UQtv+Rin/YvDWi+vG/WBBh/WQ2b I/nVlnvFphiBLg4Zn4Ki83xfkb7ypkzxitLQRhF8M98ZY9GeTLk7ppWtgdPjg/4E zHfLnIkj30lcaTB9WLoFjumTtW7nPnWizLIKMLHNE5s964nHb7BCxy9th3i7eog= -----END CERTIFICATE-----Generated at Thu Jul 24 12:12:40 2025 by rpki-client